NGFW FedRAMP Moderate and High Support

Table of Contents

Learn which apps and features NGFW FedRAMP Moderate and High environments support for use.

NGFW FedRAMP Moderate and High environments support the following apps and features for use.

Advanced WildFire (AWF), Advanced URL Filtering (AURL), and Advanced Threat Prevention (ATP) use single file manager to process data related to Inline Cloud Analysis.
AWF FedRAMP Mod customers who have been migrated to the new FedRAMP Moderate cloud FQDN should not enable Inline Cloud Analysis (ICA) if you are using AWF, AURL, and ATP in a FedRAMP Moderate deployment. You might encounter issues with AURL and ATP if your NGFW AWF configuration uses a FedRAMP Moderate FQDN and ICA is enabled.
To utilize ICA functionality for AURL and ATP, purchase a FedRAMP Moderate license and enable ICA.

Product or Feature	FedRAMP Moderate	FedRAMP High
Strata Cloud Manager (SCM) Essentials/Pro	✔	✔
IOT Enterprise/Device Security (SCM-managed)	✔	✔
Strata Logging Service	✔	✔
Advanced Wildfire	✔	✔
Advanced URL Filtering	✔	✔
Advanced Threat Prevention	✔	✔
Advanced DNS Security	✔	✔
Enterprise DLP	✔	✔
SaaS Inline/DLP	✔	✔
IoT Security (Panorama-managed only)	✔	—
Cloud Identity Engine	✔	✔
SaaS Security Posture Management (SSPM)	✔	✔
SaaS Security API	✔	—
FIPS dependencies FIPS mode is recommended to be enabled for customer of on-premise Panorama Management and computer using the GlobalProtect Agent.	✔	✔
Dedicated hub for federal	✔	✔
Dedicated support environment for federal	✔	✔